What is Ransomware?

An advanced malware, Ransomware prevents you from accessing your PC or files until you pay a ransom.

Types of Ransomware

Encrypting Ransomware

Incorporated with advanced encryption algorithms, this type of ransomware is designed to block system files and demand payment to provide the affected user with the key that will decrypt the blocked content. For example: Crypto Locker, Wannacry, Locky, CrytpoWall, etc.

Locker Ransomware

This malware locks the person out of the OS, making it impossible for them to access the data saved on it. Here, the files are not encrypted, but the ransomware still asks for a ransom to unlock the infected device. For example: Police-themed ransomware or Win locker.

MBR Ransomware

Master Boot Record (MBR) ransomware is a type of Locker ransomware. The MBR is a section of a hard drive that enables the Operating System to boot up. However, when the MBR ransomware attacks the drive, the boot process fails to complete and demands the payment of ransom as soon as possible. For example: Satana, Petya, etc.

Ransomware Attack

Identifying Ransomware Attack

The ransomware commonly attacks your personal data such as documents, photos, audios, and videos. But what can you do to identify the ransomware attack on your device? If you get any message asking for a ransom so that you can access your data, browser, emails, or your entire device, you can identify this as a ransomware attack.

Ransomware Attack

Where Ransomware Comes From

Ransomware can attack your device through emails or web browsers. This is because these two can cause the download of malicious code (ransomware) that may be in the form of malicious macros, malicious scripts, or malicious EXEs. Once downloaded, the ransomware attacks and affects your device severely.

Ransomware Families

The number of ransomware families is increasing everyday

  • Cerber
  • Crysis
  • CryptoLocker
  • CryptoWall
  • CTB-Locker
  • TorrentLocker
  • ZCryptor
  • Wannacry
  • Jigsaw
  • Reveton
  • KeRanger
  • LeChiffre
  • Locky
  • TeslaCrypt
CTB Locker Ransomware

CTB Locker Virus

CTB locker (Curve-Tor-Bitcoin Locker) or Critroni, is an example of file - encrypting ransom ware infections.

How to Remove Ransomware?

Ransomware virus can be removed in some cases! Contact professionals who can decrypt your files infected with Ransomware virus.

If you notice any unusual activity on your Desktop or Laptop such as automatic lock of the Desktop or Laptop screen, immediately switch off your computer. Doing so can further stop infection of your files.

If your Data gets infected by Ransomware virus, recovery of your Data is still possible. Contact the nearest Stellar Data Recovery branch. We are the professional Data Recovery service provider in Bangladesh and can recover your infected Data from Ransomware virus such as Wannacry, .wallet, .locky, .ctb, .Cryptolocker, etc.

How to Stay Away from Ransomware Attack?

  • Maintain a regular backup of all your data, especially the critical ones.
  • Use reliable security solutions and keep the System Watcher 'ON' on your system.
  • Always keep the software solutions updated on all devices that you use.
  • Handle emails and their attachments from senders you don't know carefully. In case of doubt, refrain from opening them.
  • If you have a self-business, you should educate your employees to manage your data intelligently. For example, keeping sensitive data separately, restricting access, and always maintaining a backup of all your data.
  • As ransomware is a criminal offence, report it to the local law enforcement agency when such instances strikes.

What to do in case of Ransomware Attack?

If in case you come across any unusual system behavior - Desktop getting locked on own, you are not able unlock, random screen appearing on your laptop or desktop, take the following steps immediately:

Turn off devices

1. Switch off your system directly (Do not use the shutdown mode)

Lan Cable

2. Disconnect the LAN cable


3. Restart the system & Install the official patch from Microsoft that closes the vulnerability used in the attack

Antivirus patch

4. Scan the latest antivirus patch

Data backup

5. Take a backup of your data


Next, observe the following Do's and Don'ts :

suspicious links

Do not open any suspicious links and attachments in email messages

suspicious images

Do not open any suspicious images attached in e-mail


Do not respond to any phishing or suspicious e-mail messages

suspicious mails

Notify the System Support Department immediately in case of suspicious emails

Security solution

Do not keep the security solutions switched off on the systems and servers connected to the network

Update Software

Keep your operating system, antivirus, browsers & other software updated with their latest versions

Infected by Ransomware virus - Want to Recover Data ?


Yes, you can access your files without paying the ransom or restoring from backup. The methods are software solution and services.

You can do the following to protect yourself from ransomware.

  1. Install and use an updated antivirus.
  2. Keep your software updated.
  3. Avoid clicking on links or opening emails and their attachments from people or companies you don't know or do not do business with.
  4. Keep a pop-up blocker running in your web-browsing applications.
  5. Regularly backup your important data.

Your IP address is not hidden: it exists in the email. There are several tools available online that determines the IP address.

Disable internet connectivity from all servers or PC to ensure there is no further encryption of data as the ransomware will be unable to reach the command and control servers. If the ransomware is associated with time limit then set BIOS clock back. You can also reach out to Stellar Data Recovery Experts immediately.


Request Free Quote